Help ATS with a contribution via PayPal:
learn more

Infomation Regarind Sobig.f virus

page: 1

log in


posted on Aug, 22 2003 @ 09:41 PM
The Following Infomation is regarding what isp servers or a partal list that will be infected later on. Here is the infomation.

The request method uses UDP port 8998. X-Force also
recommends that this port be filtered outbound.

Computers infected with the Sobig.F worm are programmed

to automatically download an executable of unknown function

from a hard-coded list of servers at 19:00 UTC (3:00pm EDT)

X-Force is recommending wholesale outbound filtering of
the following IP addresses:

Orginal Infomation from Following site

Infomation Continuing to develop: Will post more later.


new topics

log in